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Summary 



In its final report, the 9/11 Commission concluded that funding and completing a 
“biometric entry-exit screening system” for travelers to and from the United States is 
essential to our national security. The commission noted that the United States has built 
the first phase of a biometric screening system known as US-VISIT, and recommended 
that the “patchwork” of other border screening systems be consolidated with US-VISIT 
to serve as the basis for a single system to streamline border inspections. This report 
provides an overview of biometric technologies and the major U.S. biometric border 
screening systems, including US-VISIT, and discusses issues such as cost, performance, 
and user acceptance. Based in part upon the commission’s recommendations, Congress 
included biometric provisions related to entry/exit control in the Intelligence Reform and 
Terrorism Prevention Act of 2004 (P.L. 108-458). This topic will probably continue to 
be of interest to the 109 th Congress. This report will be updated as needed. 



Introduction 

The National Commission on Terrorist Attacks Upon the United States, commonly 
known as the 9/11 Commission, found that “constraining terrorist travel should become 
a vital part of counterterrorism strategy.” Noting that “false identities are used by terrorists 
to avoid being detected on a watchlist” and that “biometric identifiers make such evasions 
far more difficult,” the commission recommended that 

The Department of Homeland Security, properly supported by the Congress, should 
complete, as quickly as possible, a biometric entry-exit screening system, including 
a single system for speeding qualified travelers. 

The commission identified the United States Visitor and Immigrant Status Indicator 
Technology program (US-VISIT) as the first phase of such a program, and recommended 
that this system be fully integrated with other border screening systems. It further 
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recommended that biometric passports (or other secure identity verification) should be 
required of all travelers entering the United States, including U.S. citizens. 1 

Overview of Biometric Technologies and Applications 

Biometrics are physical or behavioral characteristics of a person that can be 
measured and used for identification. Fingerprint patterns are a familiar example. Of the 
biometric technologies so far deployed or tested by border security agencies, fingerprints 
and face recognition are the most commonly used, and iris scans are widely viewed as 
promising for future applications. Images and measurements of biometrics are typically 
digitized and reduced to a numerical identifier that is unique to a particular person. 
Biometric identifiers can then be used for two distinct purposes, identity verification and 
identity discovery. In other words, they can answer two questions: Is this person really 
who he says he is? and Who is this person? 2 

Identity Verification. In an identity verification application, a person enrolls in the 
system, and his identifying data are measured and recorded in a database or on a 
document. To confirm the person’s identity later, his identifying data are measured again 
and compared with the original. This is known as one-to-one matching. An accurate 
system will confirm a true claim of identity and reject a false claim with high probability. 
Border security applications include verifying the identity documents of border crossers, 
including pre-enrolled trusted travelers. 

Identity Discovery. Identity discovery is more challenging than identity 
verification. If a person makes no claim of identity, or if his claimed identity may be false, 
then his identifying data must be compared with the stored data of all possible matches. 
This is known as one-to-many matching. Because many comparisons are made in identity 
discovery applications, the likelihood of a coincidental match, or even multiple matches, 
is increased. Moreover, identity discovery may be impossible if biometric data are simply 
not available for some target individuals. For example, a fingerprint check cannot identify 
a traveler as a suspected terrorist if the terrorist’s fingerprints are not known. 

Leading Biometric Technologies. The most widely used biometric technology 
is fingerprint recognition , based on the pattern of ridges on the fingertips. Fingerprint 
patterns have been used in law enforcement since the 1 800s, and automated systems have 
been commercially available since the 1970s. Hand geometry, based on the dimensions 
of the fingers, joints, and knuckles, has been used for about 30 years to control access to 
secure facilities such as nuclear power plants. Facial recognition analyzes features such 
as the eye sockets, cheekbones, and sides of the mouth. It has the advantage that cameras 
can capture facial images remotely. Iris scanning technology analyzes the visible patterns 
in the colored iris of the eye. These patterns reportedly remain stable throughout one’s 
lifetime, and can be scanned without physical contact. All four of these technologies have 
been used in one or more border control applications, including programs in the United 



1 National Commission on Terrorist Attacks Upon the United States, The 9/11 Commission 
Report (Washington, 2004), pp. 385-389. 

2 A third purpose for biometric systems, identity exclusion, is effectively the opposite of identity 
verification. For example, in a law enforcement setting, fingerprints may be used to rule out a 
particular suspect as the perpetrator of a crime. 
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States, Australia, Britain, Canada, Hong Kong, Israel, the Netherlands, Saudi Arabia, and 
Singapore. Other biometric technologies include retinal scanning, signature recognition, 
voice recognition, and numerous emerging techniques of varying technological maturity. 3 

Interpreting Accuracy Claims. Claims for the accuracy of biometric 
technologies often require careful interpretation for several reasons. First, matching can 
fail in two ways: a false positive, which is an incorrect match between the identifiers of 
two different people, or a false negative, which is an unsuccessful match between two 
measurements of the same person. Second, in any system, the criteria used for matching 
can be adjusted from more stringent to less stringent. In a given system, requiring greater 
similarity before declaring a match will generally reduce false positives at the cost of 
increasing false negatives, and vice versa. The appropriate tradeoff may vary from 
application to application, even for a single technology. Third, in one-to-many matching, 
the size of the stored database strongly affects the likelihood of a coincidental match. 
Despite these factors, equipment vendors often quote just one accuracy figure known as 
the equal-error rate (EER): the accuracy of one-to-one matching when the matching 
criteria are chosen to make the false positive rate equal to the false negative rate. 

Current U.S. Biometric Systems and Border Security 

In the past decade, digitized biometrics (principally fingerprints) have been 
developed to identify individuals with greater certainty. While the commission identified 
US-VISIT as the first phase of a biometric entry/exit screening system, it also 
recommended that this system be more fully integrated with other border screening 
systems. 4 Major U.S. law enforcement and border security biometric systems are 
described below, but this treatment is not exhaustive and there are many other systems 
that might warrant integration. 

Integrated Automated Fingerprint Identification System (IAFIS). While 
most biometric technologies have been developed only in the past 10-15 years, 
fingerprints have been used by law enforcement to verify identity for the past century. For 
these purposes, the Department of Justice’ s (DOJ’s) Federal Bureau of Investigation (FBI) 
maintains the Integrated Automated Fingerprint Identification System (IAFIS), an 
automated 10-fingerprint matching system that captures rolled prints. All 50 states are 
connected to IAFIS for searches, and 47 participate by submitting new data. With over 47 
million sets of fingerprints, IAFIS is the largest biometric database in the world. 5 

Automated Biometric Fingerprint Identification System (IDENT). In 1995, 
the former Immigration and Naturalization Service (INS) piloted a two flat fingerprint 
system known as IDENT. This system includes the prints of 4.5 mi llion noncitizens. 



3 For a more detailed survey of biometric technologies and their applications, see U.S. General 
Accounting Office, Technology Assessment: Using Biometrics for Border Security, GAO-03- 1 74, 
Nov. 2002. 

4 For further information on other terrorist screening systems and watch lists, see CRS Report 
RL32366, Terrorist Identification, Screening, and Tracking Under Homeland Security 
Presidential Directive 6, by William J. Krouse. 

5 GAO, Technology Assessment, p. 149. 




